{"id":2787,"date":"2019-02-11T18:23:24","date_gmt":"2019-02-11T16:23:24","guid":{"rendered":"http:\/\/hasselba.ch\/blog\/?p=2787"},"modified":"2019-02-11T18:23:24","modified_gmt":"2019-02-11T16:23:24","slug":"re-make-sure-that-the-names-nsf-cannot-be-accessed-via-internet","status":"publish","type":"post","link":"https:\/\/hasselba.ch\/blog\/?p=2787","title":{"rendered":"Re: Make sure that the \u201cNames.nsf\u201d cannot be accessed via Internet!"},"content":{"rendered":"\n

Because my comments are still awaiting moderation (tried two times hours ago, but no luck), I have decided to answer to this post from Milan<\/a> in my blog:<\/p>\n\n\n\n

„Yes, it is not good that these passwords are reachable from „outside“, but keep in mind that under normal circumstances the access to the names.nsf is restricted by default, because \u201cAnonymous\u201d is set to \u201cNo access\u201d. So, the \u201cexposed data\u201d to the web are the informations which would be accessible for all users when using the Notes client. <\/p>\n\n\n\n

The exposed data itself are hashed and salted, so even if the password hashes are reachable this does not mean that this is directly a security nightmare – you should not sleep well, but it is enough time to fix this in the next days. I don’t want to play it down, but the CVE is from 2016 and does not contain an exploit to extract the passwords from the hashes.<\/p>\n\n\n\n

For more details, Ben has written a very informational post on passwords and hashes: Deep Dive into IBM Domino Security Part 1: Password Hashes<\/a><\/p>\n\n\n\n

Also, you can use xACL for protecting these sensitiv data. Here is what IBM wrote about this topic: Securing Internet passwords<\/a>„<\/p>\n","protected":false},"excerpt":{"rendered":"

Because my comments are still awaiting moderation (tried two times hours ago, but no luck), I have decided to answer to this post from Milan in my blog: „Yes, it is not good that these passwords are reachable from „outside“, … Weiterlesen →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35],"tags":[7,90],"class_list":["post-2787","post","type-post","status-publish","format-standard","hentry","category-security","tag-domino","tag-security"],"_links":{"self":[{"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2787","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2787"}],"version-history":[{"count":1,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2787\/revisions"}],"predecessor-version":[{"id":2788,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2787\/revisions\/2788"}],"wp:attachment":[{"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2787"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2787"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasselba.ch\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2787"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}